GithubFollow/One-KVM
1
0
Fork 0
mirror of https://github.com/mofeng-git/One-KVM.git synced 2026-01-31 01:51:53 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

kvmd-certbot

Browse Source
This commit is contained in:
Maxim Devaev
2022-06-24 16:19:28 +03:00
parent 9f4c241204
commit 9202cf1d44
8 changed files with 153 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
configs/nginx/certbot.ctx-server.conf Normal file
View File

@@ -0,0 +1,5 @@
location /.well-known/acme-challenge {
root /run/kvmd-certbot/webroot;
include /etc/kvmd/nginx/loc-nocache.conf;
auth_request off;
}

11
configs/nginx/nginx.conf
View File

@@ -27,11 +27,11 @@ http {
keepalive_timeout 10;
client_max_body_size 4k;
client_body_temp_path /tmp/kvmd-nginx.client_body_temp;
fastcgi_temp_path /tmp/kvmd-nginx.fastcgi_temp;
proxy_temp_path /tmp/kvmd-nginx.proxy_temp;
scgi_temp_path /tmp/kvmd-nginx.scgi_temp;
uwsgi_temp_path /tmp/kvmd-nginx.uwsgi_temp;
client_body_temp_path /tmp/kvmd-nginx/client_body_temp;
fastcgi_temp_path /tmp/kvmd-nginx/fastcgi_temp;
proxy_temp_path /tmp/kvmd-nginx/proxy_temp;
scgi_temp_path /tmp/kvmd-nginx/scgi_temp;
uwsgi_temp_path /tmp/kvmd-nginx/uwsgi_temp;
include /etc/kvmd/nginx/kvmd.ctx-http.conf;
include /usr/share/kvmd/extras/*/nginx.ctx-http.conf;
@@ -47,6 +47,7 @@ http {
include /etc/kvmd/nginx/listen-https.conf;
include /etc/kvmd/nginx/ssl.conf;
include /etc/kvmd/nginx/kvmd.ctx-server.conf;
include /etc/kvmd/nginx/certbot.ctx-server.conf;
include /usr/share/kvmd/extras/*/nginx.ctx-server.conf;
}
}

8
configs/os/services/kvmd-certbot.service Normal file
View File

@@ -0,0 +1,8 @@
[Unit]
Description=PiKVM - Certbot-Renew for KVMD-Nginx
[Service]
Type=oneshot
ExecStart=/usr/bin/kvmd-certbot renew --quiet
# Should we?..
# PrivateTmp=true

10
configs/os/services/kvmd-certbot.timer Normal file
View File

@@ -0,0 +1,10 @@
[Unit]
Description=Run KVMD-Certbot twice daily
[Timer]
OnCalendar=*-*-* 00/12:00:00
RandomizedDelaySec=12h
Persistent=true
[Install]
WantedBy=timers.target

5
configs/os/sysusers.conf
View File

@@ -4,6 +4,7 @@ g kvmd-ipmi - -
g kvmd-vnc - -
g kvmd-nginx - -
g kvmd-janus - -
g kvmd-certbot - -
u kvmd - "PiKVM - The main daemon" -
u kvmd-pst - "PiKVM - Persistent storage" -
@@ -11,6 +12,7 @@ u kvmd-ipmi - "PiKVM - IPMI to KVMD proxy" -
u kvmd-vnc - "PiKVM - VNC to KVMD/Streamer proxy" -
u kvmd-nginx - "PiKVM - HTTP entrypoint" -
u kvmd-janus - "PiKVM - Janus WebRTC Gateway" -
u kvmd-certbot - "PiKVM - Certbot-Renew for KVMD-Nginx"
m kvmd video
m kvmd gpio
@@ -26,3 +28,6 @@ m kvmd-janus audio
m kvmd-nginx kvmd
m kvmd-nginx kvmd-janus
m kvmd-nginx kvmd-certbot
m kvmd-certbot kvmd-pst

8
configs/os/tmpfiles.conf
View File

@@ -1 +1,7 @@
D /run/kvmd 0775 kvmd kvmd -
D /run/kvmd 0775 kvmd kvmd -
D /run/kvmd-certbot 0755 root root -
D /run/kvmd-certbot/webroot 0755 kvmd-certbot kvmd-certbot -
D /tmp/kvmd 0775 kvmd kvmd -
D /tmp/kvmd-nginx 0700 kvmd-nginx root -
D /tmp/kvmd-certbot 0755 kvmd-certbot kvmd-certbot -